@sebastienrousseau/dotfiles 0.2.520 → 0.2.521

package/scripts/dot/commands/core.sh

@@ -1,217 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-## Dotfiles Core Commands — Core chezmoi operations for the dot CLI.
-##
-## Provides apply, sync, update, add, diff, status, remove, cd, and edit
-## commands for managing dotfiles through the unified dot interface.
-##
-## # Requirements
-## - chezmoi: Dotfiles manager
-## - bash 4+: Shell interpreter
-##
-## # Usage
-## dot apply                   # Apply dotfiles
-## dot sync                    # Alias for apply
-## dot update                  # Pull and apply updates
-## dot add <file>              # Add file to chezmoi
-## dot diff                    # Show pending changes
-## dot status                  # Show configuration drift
-## dot remove <file>           # Remove managed file
-## dot cd                      # Print source directory
-## dot edit                    # Open source in editor
-##
-## # Platform Notes
-## - All platforms: Full chezmoi support
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck source=../../../lib/dot/utils.sh
-source "$SCRIPT_DIR/../../../lib/dot/utils.sh"
-
-if [[ "${1:-}" != "cd" ]]; then
-  dot_ui_command_banner "Core" "${1:-}"
-fi
-
-usage() {
-  cat <<'EOF'
-Usage: core.sh <command> [args...]
-
-Commands:
-  apply, sync, update, add, diff, status, remove, cd, edit, commit,
-  clean-cache, uninstall
-EOF
-}
-
-cmd_apply() {
-  local src_dir
-  src_dir="$(resolve_source_dir)"
-  if [ -n "$src_dir" ] && [ -f "$src_dir/scripts/ops/chezmoi-apply.sh" ]; then
-    exec bash "$src_dir/scripts/ops/chezmoi-apply.sh" "$@"
-  fi
-  exec chezmoi apply "$@"
-}
-
-cmd_sync() {
-  cmd_apply "$@"
-}
-
-cmd_update() {
-  local src_dir
-  src_dir="$(resolve_source_dir)"
-  if [ -n "$src_dir" ] && [ -f "$src_dir/scripts/ops/chezmoi-update.sh" ]; then
-    exec bash "$src_dir/scripts/ops/chezmoi-update.sh" "$@"
-  fi
-  echo "Updating Dotfiles..."
-  exec chezmoi update "$@"
-}
-
-cmd_add() {
-  if [ -z "${1:-}" ]; then
-    echo "Usage: dot add <file>"
-    echo ""
-    echo "Add a file to the chezmoi source directory."
-    echo "The file will be managed by chezmoi from now on."
-    exit 1
-  fi
-  exec chezmoi add "$@"
-}
-
-cmd_diff() {
-  local src_dir
-  src_dir="$(resolve_source_dir)"
-  if [ -n "$src_dir" ] && [ -f "$src_dir/scripts/ops/chezmoi-diff.sh" ]; then
-    exec bash "$src_dir/scripts/ops/chezmoi-diff.sh" "$@"
-  fi
-  exec chezmoi diff "$@"
-}
-
-cmd_status() {
-  local out rc=0
-  # Capture chezmoi's stderr too so an actual tool failure surfaces
-  # to the user instead of being indistinguishable from a clean tree.
-  out="$(chezmoi status "$@" 2>&1)" || rc=$?
-  ui_header "Dotfiles Status"
-  if [[ "$rc" -ne 0 ]]; then
-    ui_err "chezmoi" "exited $rc"
-    [[ -n "$out" ]] && printf "%s\n" "$out"
-    return "$rc"
-  fi
-  if [[ -z "$out" ]]; then
-    ui_ok "Clean" "no local drift detected"
-  else
-    printf "%s\n" "$out"
-  fi
-}
-
-cmd_remove() {
-  run_script "scripts/ops/chezmoi-remove.sh" "Remove helper" "$@"
-}
-
-cmd_cd() {
-  local src_dir
-  src_dir="$(resolve_source_dir)"
-  if [ -n "$src_dir" ]; then
-    echo "$src_dir"
-  else
-    echo "Dotfiles source not found." >&2
-    exit 1
-  fi
-}
-
-cmd_edit() {
-  local src_dir
-  src_dir="$(require_source_dir)"
-  if [ -n "${EDITOR:-}" ]; then
-    exec "$EDITOR" "$src_dir"
-  elif has_command nvim; then
-    exec nvim "$src_dir"
-  elif has_command vim; then
-    exec vim "$src_dir"
-  else
-    echo "No editor found. Set \$EDITOR to open $src_dir."
-    exit 1
-  fi
-}
-
-cmd_commit() {
-  run_script "dot_local/bin/executable_git-ai-commit" "Git AI commit script" "$@"
-}
-
-cmd_uninstall() {
-  run_script "scripts/uninstall.sh" "Uninstall script" "$@"
-}
-
-cmd_clean_cache() {
-  ui_info "Cache" "Clearing shell initialization caches"
-  local cache_dir="${XDG_CACHE_HOME:-$HOME/.cache}"
-  rm -rf "$cache_dir/zsh"/*-init.zsh "$cache_dir/zsh"/*.zwc 2>/dev/null || true
-  rm -rf "$cache_dir/bash"/*-init.bash 2>/dev/null || true
-  rm -rf "$cache_dir/fish"/*-init.fish 2>/dev/null || true
-  rm -rf "$cache_dir/nushell"/*.nu 2>/dev/null || true
-  ui_info "Cache" "Cleared. Restart shell to regenerate"
-}
-
-# Dispatch
-case "${1:-}" in
-  --help | -h | help)
-    usage
-    ;;
-  "")
-    usage
-    exit 1
-    ;;
-  apply)
-    shift
-    cmd_apply "$@"
-    ;;
-  sync)
-    shift
-    cmd_sync "$@"
-    ;;
-  update)
-    shift
-    cmd_update "$@"
-    ;;
-  add)
-    shift
-    cmd_add "$@"
-    ;;
-  diff)
-    shift
-    cmd_diff "$@"
-    ;;
-  status)
-    shift
-    cmd_status "$@"
-    ;;
-  remove)
-    shift
-    cmd_remove "$@"
-    ;;
-  cd)
-    shift
-    cmd_cd "$@"
-    ;;
-  edit)
-    shift
-    cmd_edit "$@"
-    ;;
-  commit)
-    shift
-    cmd_commit "$@"
-    ;;
-  clean-cache)
-    shift
-    cmd_clean_cache "$@"
-    ;;
-  uninstall)
-    shift
-    cmd_uninstall "$@"
-    ;;
-  *)
-    echo "Unknown core command: ${1:-}" >&2
-    exit 1
-    ;;
-esac

package/scripts/dot/commands/diagnostics.sh

@@ -1,265 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-# Dotfiles CLI - Diagnostics Commands
-# doctor, heal, health, rollback, drift, history, benchmark, verify, perf,
-# scorecard, conflicts, locks, snapshot, load-bench, chaos, bundle, attest
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck source=../../../lib/dot/utils.sh
-source "$SCRIPT_DIR/../../../lib/dot/utils.sh"
-
-dot_ui_command_banner "Diagnostics" "${1:-}" "$@"
-
-usage() {
-  cat <<'EOF'
-Usage: diagnostics.sh <command> [args...]
-
-Commands:
-  doctor, heal, health, security-score, scorecard, perf, conflicts, locks,
-  snapshot, attest, rollback, drift, history, benchmark, verify, restore,
-  load-bench, load-bench-pty, chaos, teleport, secret-audit, bundle, metrics,
-  smoke-test, intelligence
-EOF
-}
-
-cmd_doctor() {
-  local src_dir
-  src_dir="$(resolve_source_dir)"
-  # Prefer the unified doctor script (doctor-unified.sh)
-  if [ -n "$src_dir" ] && [ -f "$src_dir/scripts/diagnostics/doctor-unified.sh" ]; then
-    exec bash "$src_dir/scripts/diagnostics/doctor-unified.sh" "$@"
-  elif [ -n "$src_dir" ] && [ -f "$src_dir/scripts/diagnostics/doctor.sh" ]; then
-    exec bash "$src_dir/scripts/diagnostics/doctor.sh" "$@"
-  fi
-  exec chezmoi doctor "$@"
-}
-
-cmd_smoke_test() {
-  run_script "scripts/diagnostics/smoke-test.sh" "Smoke test script" "$@"
-}
-
-cmd_intelligence() {
-  run_script "lib/dot/bento.sh" "Intelligence Surface" "$@"
-}
-
-cmd_heal() {
-  run_script "scripts/ops/heal.sh" "Heal script" "$@"
-}
-
-cmd_health() {
-  run_script "scripts/diagnostics/health.sh" "Health dashboard" "$@"
-}
-
-cmd_security_score() {
-  run_script "scripts/diagnostics/security-score.sh" "Security score" "$@"
-}
-
-cmd_scorecard() {
-  run_script "scripts/diagnostics/scorecard.sh" "Scorecard" "$@"
-}
-
-cmd_perf() {
-  run_script "scripts/diagnostics/perf.sh" "Performance profiling" "$@"
-}
-
-cmd_conflicts() {
-  run_script "scripts/diagnostics/conflicts.sh" "Conflicts report" "$@"
-}
-
-cmd_locks() {
-  run_script "scripts/diagnostics/version-locks.sh" "Version locks" "$@"
-}
-
-cmd_snapshot() {
-  run_script "scripts/diagnostics/snapshot.sh" "Snapshot" "$@"
-}
-
-cmd_attest() {
-  run_script "scripts/diagnostics/workstation-attestation.sh" "Workstation attestation" "$@"
-}
-
-cmd_rollback() {
-  run_script "scripts/ops/rollback.sh" "Rollback script" "$@"
-}
-
-cmd_drift() {
-  local src_dir
-  src_dir="$(resolve_source_dir)"
-  if [ -n "$src_dir" ] && [ -f "$src_dir/scripts/diagnostics/drift-dashboard.sh" ]; then
-    exec bash "$src_dir/scripts/diagnostics/drift-dashboard.sh" "$@"
-  fi
-  exec chezmoi status "$@"
-}
-
-cmd_history() {
-  run_script "scripts/diagnostics/history-analysis.sh" "History analysis script" "$@"
-}
-
-cmd_benchmark() {
-  run_script "scripts/diagnostics/benchmark.sh" "Benchmark script" "$@"
-}
-
-cmd_verify() {
-  run_script "scripts/diagnostics/verify.sh" "Verify script" "$@"
-}
-
-cmd_restore() {
-  run_script "scripts/dot/commands/restore.sh" "Restore script" "$@"
-}
-
-cmd_load_bench() {
-  command dot-load-benchmark "$@"
-}
-
-cmd_load_bench_pty() {
-  command dot-load-benchmark-pty "$@"
-}
-
-cmd_chaos() {
-  run_script "scripts/ops/chaos.sh" "Chaos engineering script" "$@"
-}
-
-cmd_teleport() {
-  run_script "scripts/ops/teleport.sh" "Teleport script" "$@"
-}
-
-cmd_secret_audit() {
-  run_script "scripts/diagnostics/secret-governance.sh" "Secret governance script" "$@"
-}
-
-cmd_bundle() {
-  run_script "scripts/ops/bundle.sh" "Offline bundle script" "$@"
-}
-
-cmd_metrics() {
-  local src_dir
-  src_dir="$(resolve_source_dir)"
-  if [[ -z "$src_dir" ]]; then
-    echo "Dotfiles source not found." >&2
-    exit 1
-  fi
-  # shellcheck source=../../../lib/dot/log.sh
-  # shellcheck disable=SC1091
-  source "$src_dir/lib/dot/log.sh"
-  ui_header "Recent Metrics"
-  echo ""
-  dot_metrics_summary "${1:-20}"
-}
-
-# Dispatch
-case "${1:-}" in
-  --help | -h | help)
-    usage
-    ;;
-  "")
-    usage
-    exit 1
-    ;;
-  doctor)
-    shift
-    cmd_doctor "$@"
-    ;;
-  heal)
-    shift
-    cmd_heal "$@"
-    ;;
-  health | health-check)
-    shift
-    cmd_health "$@"
-    ;;
-  security-score)
-    shift
-    cmd_security_score "$@"
-    ;;
-  scorecard | score)
-    shift
-    cmd_scorecard "$@"
-    ;;
-  perf)
-    shift
-    cmd_perf "$@"
-    ;;
-  conflicts)
-    shift
-    cmd_conflicts "$@"
-    ;;
-  locks)
-    shift
-    cmd_locks "$@"
-    ;;
-  snapshot)
-    shift
-    cmd_snapshot "$@"
-    ;;
-  attest | attestation)
-    shift
-    cmd_attest "$@"
-    ;;
-  rollback)
-    shift
-    cmd_rollback "$@"
-    ;;
-  drift)
-    shift
-    cmd_drift "$@"
-    ;;
-  history)
-    shift
-    cmd_history "$@"
-    ;;
-  benchmark)
-    shift
-    cmd_benchmark "$@"
-    ;;
-  verify)
-    shift
-    cmd_verify "$@"
-    ;;
-  restore)
-    shift
-    cmd_restore "$@"
-    ;;
-  load-bench)
-    shift
-    cmd_load_bench "$@"
-    ;;
-  load-bench-pty)
-    shift
-    cmd_load_bench_pty "$@"
-    ;;
-  chaos)
-    shift
-    cmd_chaos "$@"
-    ;;
-  teleport)
-    shift
-    cmd_teleport "$@"
-    ;;
-  secret-audit)
-    shift
-    cmd_secret_audit "$@"
-    ;;
-  bundle)
-    shift
-    cmd_bundle "$@"
-    ;;
-  metrics)
-    shift
-    cmd_metrics "$@"
-    ;;
-  smoke-test)
-    shift
-    cmd_smoke_test "$@"
-    ;;
-  intelligence)
-    shift
-    cmd_intelligence "$@"
-    ;;
-  *)
-    echo "Unknown diagnostics command: ${1:-}" >&2
-    exit 1
-    ;;
-esac

package/scripts/dot/commands/env-emit.sh

@@ -1,203 +0,0 @@
-#!/usr/bin/env bash
-# SPDX-License-Identifier: Apache-2.0 OR MIT
-# Copyright (c) 2015-2026 Sebastien Rousseau
-#
-# `dot env emit` — render a portable workstation-environment
-# manifest. The output is the canonical "what is installed on this
-# machine + at what version + from which source" record that
-# downstream tooling (CycloneDX SBOM aggregators, AgentSpec /
-# AAIF agents, EU CRA compliance reports) consumes.
-#
-# v1 schema at docs/schema/dot-env-v1.json. Conforming to a fixed
-# schema lets us re-render this manifest into any downstream format
-# (AGENTS.md, devcontainer-feature.json, Brewfile, mise.toml) from
-# a single source of truth — see docs/operations/MANIFEST.md.
-#
-# Usage:
-#   dot env emit                       # default: json
-#   dot env emit --format json
-#   dot env emit --output env.json
-#   dot env emit --pretty              # default; --compact for one-line
-#
-# Exit codes:
-#   0  manifest written / printed
-#   1  bad usage
-#   2  jq or mise missing
-#   3  mise call failed
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-# shellcheck source=../../../lib/dot/utils.sh
-source "$SCRIPT_DIR/../../../lib/dot/utils.sh"
-
-dot_env_emit() {
-  local format="json"
-  local output=""
-  local pretty=1
-
-  while (($#)); do
-    case "$1" in
-      --format)
-        format="${2:-}"
-        shift 2 || {
-          ui_err "--format needs a value"
-          return 1
-        }
-        ;;
-      --format=*)
-        format="${1#*=}"
-        shift
-        ;;
-      --output | -o)
-        output="${2:-}"
-        shift 2 || {
-          ui_err "--output needs a value"
-          return 1
-        }
-        ;;
-      --output=*)
-        output="${1#*=}"
-        shift
-        ;;
-      --pretty)
-        pretty=1
-        shift
-        ;;
-      --compact)
-        pretty=0
-        shift
-        ;;
-      -h | --help)
-        cat <<-EOF
-	Usage: dot env emit [--format <fmt>] [--output <path>] [--pretty|--compact]
-
-	  Render the workstation-environment manifest (v1 schema).
-
-	Formats:
-	  json     (default) v1 canonical form per docs/schema/dot-env-v1.json
-	  ndjson   one JSON object per tool — easier to grep / pipe
-
-	Output:
-	  --output FILE   write to FILE (atomic mktemp + mv)
-	  default         stdout
-
-	Examples:
-	  dot env emit                     # print to stdout
-	  dot env emit --output env.json   # write atomically
-	  dot env emit --format ndjson | grep '^{"name":"node"'
-	EOF
-        return 0
-        ;;
-      *)
-        ui_err "unknown flag: $1"
-        return 1
-        ;;
-    esac
-  done
-
-  case "$format" in
-    json | ndjson) ;;
-    *)
-      ui_err "unsupported format: $format (json, ndjson)"
-      return 1
-      ;;
-  esac
-
-  has_command jq || {
-    ui_err "jq required (brew install jq / apt install jq)"
-    return 2
-  }
-  has_command mise || {
-    ui_err "mise required (the manifest's source of truth)"
-    return 2
-  }
-
-  local mise_raw
-  mise_raw="$(mise ls --json 2>/dev/null)" || {
-    ui_err "mise ls --json failed"
-    return 3
-  }
-
-  # Static fields we want in every manifest: schema version + emit
-  # timestamp + emitter version + repo URL + the host fingerprint
-  # bits chezmoi already records (os, machine).
-  local emitter_version
-  emitter_version="$(grep -E '^dotfiles_version[[:space:]]*=' \
-    "$(resolve_chezmoi_source_dir)/.chezmoidata.toml" 2>/dev/null |
-    head -1 | sed -E 's/.*"([^"]+)".*/\1/' || echo "unknown")"
-  local timestamp
-  timestamp="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
-  local os_type machine_arch
-  os_type="$(uname -s 2>/dev/null || echo unknown)"
-  machine_arch="$(uname -m 2>/dev/null || echo unknown)"
-  local hostname
-  hostname="$(uname -n 2>/dev/null || echo unknown)"
-
-  # Build the manifest. jq does the heavy lifting: take the raw
-  # `mise ls --json` shape (an object keyed by tool name → array of
-  # installed versions) and flatten to a normalised array of tool
-  # records. Each record carries: name, version, source (config
-  # file or "orphan"), requested (semver/range/latest spec), and
-  # install_path (auditable absolute path).
-  local body
-  body="$(printf '%s' "$mise_raw" | jq --arg ev "$emitter_version" \
-    --arg ts "$timestamp" \
-    --arg os "$os_type" \
-    --arg arch "$machine_arch" \
-    --arg host "$hostname" '
-      {
-        schema_version: "https://sebastienrousseau.github.io/dotfiles/schema/dot-env-v1.json",
-        manifest_version: "1.0.0",
-        emitted_at: $ts,
-        emitter: {
-          name: "dot env emit",
-          version: $ev,
-          repo: "github.com/sebastienrousseau/dotfiles"
-        },
-        host: {
-          hostname: $host,
-          os: $os,
-          arch: $arch
-        },
-        tools: [
-          to_entries[] as $t
-          | $t.value[]
-          | {
-              name: $t.key,
-              version: (.version // null),
-              source: (.source.path // "orphan"),
-              source_type: (.source.type // null),
-              requested_version: (.requested_version // null),
-              install_path: (.install_path // null),
-              active: (.active // false)
-            }
-        ]
-      }
-    ')"
-
-  local rendered
-  if [[ "$format" == "ndjson" ]]; then
-    # NDJSON: header object on line 1, one tool per subsequent line.
-    rendered="$(
-      printf '%s' "$body" |
-        jq -c '
-        ({schema_version, manifest_version, emitted_at, emitter, host}),
-        (.tools[])'
-    )"
-  elif ((pretty)); then
-    rendered="$(printf '%s' "$body" | jq '.')"
-  else
-    rendered="$(printf '%s' "$body" | jq -c '.')"
-  fi
-
-  if [[ -n "$output" ]]; then
-    local tmp
-    tmp="$(mktemp "${output}.XXXXXX")"
-    printf '%s\n' "$rendered" >|"$tmp"
-    mv "$tmp" "$output"
-    ui_ok "manifest" "wrote $(printf '%s' "$rendered" | jq -r '.tools | length' 2>/dev/null || echo '?') tools → $output"
-  else
-    printf '%s\n' "$rendered"
-  fi
-}